Re: Granting write to ou

[Troy Knabe <knabe@4j.lane.edu>]

You are trying to modify cn=config, not dc=example,dc=net, which is where your account is the admin.


On Jan 4, 2011, at 12:59 PM, Thomas D. Dahlmann wrote:

> 
>> something like:
>> ldapmodify -D "cn=config" -W -H ldap://some.host
>> dn:olcDatabase={1}hdb,cn=config
>> changetype: modify
>> replace: olcAccess
>> olcAccess: {1} to dn.subtree="ou=addressbook,dc=example,dc=net" by
>>  users write by * read
> Gives me this:
> ldapmodify -D "cn=admin,dc=example,dc=net" -W -H ldap://localhost
> Enter LDAP Password:
> dn:olcDatabase={1}hdb,cn=config
> changetype: modify
> replace: olcAccess
> olcAccess: to dn.subtree="ou=addressbook,dc=example,dc=net" by users write by * read
> 
> modifying entry "olcDatabase={1}hdb,cn=config"
> ldap_modify: Insufficient access (50)
> 
> "cn=admin,dc=example,dc=net" is my root account so I don't see why it shouldn't have access??
> 
> /Thomas